General Data Protection Law (LGPD)

Last updated: 08/08/2026

1. Who we are

Okamy Studio, CNPJ 49.778.119/0001-89, operator of the service Senhas Já (https://senhasja.com.br). Contact: contato@senhasja.com.br

2. Data we collect

Registration data: name, email and password (Argon2id hash — we do not store the password as plain text).
Payment data: processed exclusively by Mercado Pago. We do not store card data.
Saved passwords: encrypted with AES-256-GCM under your derived key. We have no access to the content.
Access logs: IP, date/time, actions performed, for security and compliance.
Cookies: authenticated session, language preference. No third-party tracking cookies without consent.

3. Purpose of processing

Provision of the password management service.
Payment processing and invoice issuance.
Communication about the account and subscription.
Security, fraud prevention and compliance with legal obligations.

4. Your rights (LGPD, Art. 18)

Confirmation that your data is being processed.
Access, correction and portability of data.
Deletion of personal data (except where required by law).
Revocation of consent at any time.
Information about sharing with third parties.

To exercise your rights, send a request to contato@senhasja.com.br. We will respond within 15 business days.

5. Data retention

Account data is kept while the account is active. After deletion, we erase the data within 30 days, unless otherwise required by law.

6. Security

We use AES-256-GCM for password encryption, HTTPS (TLS 1.2+), Argon2id for login passwords, and restricted employee access.

7. Cookies

We use only essential cookies for authentication (session) and language preference. Traffic analysis may be done via Google Analytics 4, which follows Google's privacy terms.

8. Contact and DPO

Okamy Studio — CNPJ 49.778.119/0001-89
Email: contato@senhasja.com.br
Group site: https://okamystudio.com